Privacy Policy

Protecting your privacy and ensuring that your personal data is held securely is very important to Mahindra & Mahindra Limited ("M&M" or "we/our/us" or the "Company", which includes its divisions, affiliates and group companies) and as such this Privacy Policy and Privacy Statement shall be referred and read as an integral part of the Terms of Use of the Website.
We collect information about you when you visit our Website (https://auto.mahindra.com or https://wyh-uat.m-devsecops.com), use our services, or view our online advertisements. The information which we collect and store during normal use of the site is used to monitor the use of the site and to help further development of our products and services.
This Privacy Policy applies only to the Website. The text and graphic links on the Website may link to third party social media sites, websites and information and service providers that may also collect information from you. In addition, some of the pages on the Website may lead to co-branded web pages that are hosted and served by third-parties. In each of the said cases, we have no control over the privacy policy of any third-party and advise you to please examine their privacy policy prior to submitting any personal information.
In general you can visit the Website on the Internet without telling us who you are or providing personal information. Such use does not result in any personally identifiable data being collected or stored. We may however collect information about you when you visit the Website, use our services, or view our online advertisements. Having said that, unless you submit personal information about yourself by filing in any form on the Website or by sending us an e-mail, we are not obliged to maintain any other personal information as a result of your access and usage of this Website.
The information which we collect and store are details collected during normal use of the Website by you, and may be used to monitor your use of the Website thereof and to help further development of our products and services in India or market or promote additional products and/or services to you, unless you specifically ask us in writing not to do so.
We do not share your personal information with third parties, unless we need to share your personal information to provide the product(s) or service(s) you have requested and we have asked for and obtained your explicit consent. The foregoing notwithstanding, if (1) disclosure was required by law, rule or regulation or was in response to a valid order of a court or authorized agency of government or other legal process and/or; (2) When we find your action on the Website violates the terms and condition or any of your usage guidelines for specific products or services.
This Privacy Policy will apply when you use the Website to discover more information about us and our products and/or services. Whilst any application, request or enquiry you make, may be passed or made available to our affiliates or subsidiaries ("Mahindra Group affiliates") some of which will be based in countries that do not have data protection laws, all Mahindra Group affiliates are required to comply with an internal Privacy Policy which requires that steps are taken to protect your personal information and for it only to be used for the purpose(s) for which it was submitted.
By submitting your personal information through this Website, you shall be consenting to it being processed in the manner described above by Mahindra Group affiliates around the world and our hosting organizations around the world. If you have submitted personal information through this Website and wish us to cease using it for the purposes submitted, please contact us. At any time, if you are concerned that the information we hold about you is incorrect, please do not hesitate to contact us to correct such information.
We are strongly committed to the protection of your privacy online and accordingly, we take security measures in relation to the information and personal data that is contained at our facilities and restrict access to the Website, buildings, computer rooms, office desk, technology areas, equipment and other facilities where unauthorised access by people could compromise our security.
We also take appropriate technical and organizational measures to protect the personal information provided to us by you against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. We also take further measures to comply with the relevant statement regarding what we can do with personal information we obtain from you. We endeavour to detect and investigate every breach of security by having relevant controls in place which should alert us to a breach of security. We may also use encryption technology from time to time to assist in protecting any information or data which you submit. Having said that, we cannot and do not guarantee the security of any personal information or data you disclose online, having regard to the nature of the Internet. In any event, you accept the inherent security implications of disclosing information over the internet and agree not to hold us responsible for any breach of security unless we have been negligent or wilfully in default of our obligations under the relevant legislation.

PRIVACY STATEMENT
Protecting your privacy and ensuring that your personal data is held securely is very important to Mahindra & Mahindra Limited ("M&M" or "we/our/us" or the "Company", which includes its divisions, affiliates and group companies) and as such this Privacy Policy and Privacy Statement shall be referred and read as an integral part of the Terms of Use of the Website. We want you to be confident that we are looking after your interests and that is why we have set out our information practices in this Privacy Statement. We are strongly committed to the protection of your privacy online and accordingly, we take appropriate technical and organizational measures to protect the personal information provided to us by you against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access. We also take further measures to comply with the relevant statement regarding what we can do with personal information we obtain from you.
However, we cannot guarantee the security of any personal information or data you disclose online, having regard to the nature of the Internet. In any event, you accept the inherent security implications of disclosing information over the internet and agree not to hold us responsible for any breach of security unless we have been negligent or wilfully in default of our obligations under the relevant legislation. The Company endeavours to detect and investigate every breach of security by having relevant controls in place which should alert us to a breach of security. We may also use encryption technology from time to time to assist in protecting any information or data which you submit. At any time, if you are concerned that the information we hold about you is incorrect, please do not hesitate to contact us to correct such information.
Data Privacy Disclaimer
You declare that you are an Indian resident and shall not access the Website nor access the products and services offered on the Website if you are not an Indian resident.
M&M respects your private sphere
When processing personal data, we attach great importance to protecting your private sphere and ensuring that your data are secure. This data protection policy tells you about the data we process, why we need them, and how you can lodge an objection to the processing of your data.
We collect, process and store personal data (including IP addresses) only as permitted by law or if you have given your consent, for example when registering for an event or a service or when registering for an account on the Website.

What data do we collect?
We collect several types of information from and about users of our Website, including information:

• by which you may be personally identified, such as name, postal address, e-mail address, telephone number, login address / password, financial or banking information, insurance details, geo-location information when permitted by you on your device, details of transactions carried out by you on or through the Website, or any other identifier by which you may be contacted online or offline as well as other demographic data ("Personal Data");
• that is about you but individually does not identify you, including but not limited to the type of interaction on our Website or other statistical information relating to the Website use, and any other information provided by you on our Website ("Usage Information"); and/or
• User Contributions made by you (please refer the Terms of Use for more information), about your searches on our Website, products/ services checked or verified on our Website, internet connection, the equipment you use to access our Website and usage details.

How do we collect data?
We collect this information:

• Directly from you when you provide it to us on the Website, including when you provide the information on the Website or create an account on the Website or otherwise during online interaction or offline with M&M's authorized dealerships.
• Automatically as you navigate through the Website. Information collected automatically may include usage details, internet protocol addresses, and information collected through cookies, and other tracking technologies.
• From third parties, for example, our business partners or service providers, who have received the information from you with consent to further disclose to third parties.

Do we pass your data on to third parties?
As a matter of principle, we pass your personal data on to third parties only if we are authorized by law to do so or if you have given your consent. This is the case, for example, when we display third party services on our Website for your benefit.
External service providers that process data on our behalf are contractually obliged to comply fully with the law on Data Protection. We make sure that such external service providers are capable of safeguarding data. Our prior consent is required before they are permitted to transfer responsibility for processing personal data to a third party.
How long do we retain your personal data?
We retain your data as long as necessary for our business relationship with you, or as long as we have a legitimate interest in continuing to store the information. We delete your personal data in all other cases, except when continued storage is required under the law (for example, we are legally obligated to retain documents such as contracts and invoices for a period of 10 years).
What data are processed when you use our Website?
In general, you may visit our Website without providing personal information. When you visit the site, our servers make a temporary record of each access in a log file. The following technical data are collected and stored until they are automatically deleted after no more than seven months:

• The IP address of the computer used to access the site
• GPS location of the User, if allowed by the User
• The date and time of access
• The website from which access was obtained, as well as the search term used, as applicable
• The name and URL of the accessed file
• The search queries used
• Your computer's operating system (shown by the user agent)
• The browser you are using (shown by the user agent)
• The type of device, if access is obtained through a mobile telephone
• The transmission protocol used

By collecting and processing these data, we promote system security and stability, allow for error and performance analysis, and serve internal statistical needs. This also enables us to optimize our online services. In addition, IP addresses are used to preset the Website
We may use any available technology for such automatic data collection, including but not limited to:

• Cookies (or browser cookies) – explained in further detail below.
• Flash Cookies. Certain features of our Website may use local stored objects (or flash cookies) to collect and store information about your preferences and navigation to, from, and on our Website. Flash cookies are not managed by the same browser settings as are used for browser cookies and we advise you to keep yourself updated on how to manage your privacy and security settings for flash cookies on your device.
• Web Beacons. Pages of our Website and our e-mails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit M&M, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity)

What are cookies, and when are they used?
Cookies are small text files that are placed on your computer when you visit our Website. When you return to the Website, your browser transmits the information contained in the cookies back to us, and this allows the system to recognize your terminal device. With the help of cookies, we are able to optimize our Website and facilitate its use.
When you visit our Website, a popup message informs you of our use of cookies and of the fact that visiting the site implies your consent . If you opt not to permit the use of cookies, you may deactivate and delete all cookies at any time. For more information, consult your browser's help function. If you choose to deactivate cookies, however, certain functions on our Website may no longer be available to you. The deactivation or deletion process must be repeated if you use a different browser or terminal device.
To manage or deactivate the use of cookies by third-party providers, visit the respective website. As we do not operate their website, we are not responsible for it, nor do we have any influence on its contents or accessibility.
In addition to the data listed above (see "What data are processed when you use our websites?"), we gather the following information:

• The user's navigation path on the Website
• The length of time the user spends on the Website or subpage
• The subpage from which the user leaves the Website
• The country, region or city from which the Website is accessed
• The terminal device (type, version, color depth, resolution, width and height of the browser window)

Repeat or new visitor
This information is used to analyze Website use. If you want to deactivate Google Analytics, you will find the necessary browser add-on at http://tools.google.com/dlpage/gaoptout?hl=de. As explained in the previous section, you can avoid the creation of a user profile by deactivating the use of all cookies.
Social media and third-party links
Our Website contains plugins and links to several social networks and third-party websites (Facebook, Twitter, LinkedIn, Google+ etc.). The links are marked with the logos of the providers. Clicking on a link takes you to the relevant social media platform or third-party platform, where this data protection policy does not apply. The provisions that apply there can be found in the data protection policy posted on the respective provider's website. Personal information is not transmitted to the social media provider or the third party service provider until you click on a link or plugin. By accessing the linked site, you are allowing the provider to process your data. We have no control or influence over such data processing, nor do we have information about the extent of data collection, the purposes for which the data are processed, or the retention period. We have no information about the deletion of data by the plugin provider.
Newsletter
You can subscribe to newsletters through our online services. We use the so-called "double opt-in" method; this means that if you want to receive our email newsletter, you must confirm your request by clicking on a link in a message. If you subsequently decide that you no longer want to receive our newsletter, you can cancel your subscription at any time, effective going forward, by revoking your consent. This can be done by clicking on a link in the email newsletter. Alternatively, you can contact us using the information in the Contact section.
What rights do you have concerning your personal data?
You have the following rights:

• You are entitled to request information about your stored data.
• You may request that your personal data be corrected, supplemented, blocked or deleted.
• If you have consented to the processing of your data, you may revoke that consent at any time, effective going forward.
• You may do so via letter or email. See Contact section.

Data security
We use appropriate technical and organizational security measures to protect stored personal data against manipulation, partial or total loss, and unauthorized access by third parties. Our security measures are continually upgraded as technology advances.
Amending this data protection policy
We reserve the right to amend or supplement this policy at any time, as we see fit and in accordance with data protection law. Please consult this policy on a regular basis.
Contact
If you have questions about your rights concerning your personal data or related issues, please write to us at [email protected]
Contacting us
We have taken adequate measures to secure access to your personal data. We regularly reviews our compliance with this Privacy Policy and Privacy Statement. Please feel free to direct any questions or concerns regarding this Privacy Policy or Privacy Statement or our treatment of Personal Data and information by completing our web contact form or by writing to us at the following addresses:
Head Office
To
Technology Team,

Address:
Mahindra & Mahindra Ltd.
Automotive Division
Mahindra Towers, 3rd Floor
Akurli Road, Kandivali (E)
Mumbai 400 101

Email Id:
[email protected]

Phone No:
022-2884-9052

Changes to this Policy:
Company may edit this policy from time to time. If we make any substantial changes, we will notify you by posting a prominent announcement on our pages.